Technology is taking over everything in an organization now a day and will continue to be incorporated more into businesses everyday use. Employees are using it to gain access to buildings, remote access to the system from anywhere in the world and restaurants are using it to take our payments right there are the table. With that, I believe both…[Read more]

Annamarie, you raise a good point about unforeseeable controls that could arise later on after the design phase has been completed and production is in order. New controls would have to be put in place to deal with any new problems that arise and during the design phase you cannot predict that this problem would occur to deal with it. This is a…[Read more]

3. A person’s character is very crucial in the audit industry. How would you build your reputation and maintain a good ethical character in this industry?

I would work hard and make sure everything I do has a paper trail to prove I did this and that. I would want to build my reputation up and make sure people know that I am dependable and my w…[Read more]

2. In the Real World Control Failures we’ve reviewed, describe the character of the leaders involved. Is it a root of the control failures?

The leaders where not IT orientated and did not oversea the work as often as needed to be. They did not focus on controls in place and that is why it failed ultimately. They need to have some interest in t…[Read more]

Nice List Ian, you hit all the right points on why control framework is needed to guide IT auditing. Everything you said is to ensure the controls in place for the organization are working properly and there are controls in place to mitigate risk. It all flows smoothly and sound, business value at the end ties it all together by having the control…[Read more]

Good analysis Tamer, a control framework is the basis for business to establish its internal controls around and also for the audit process and procedures like you mention. Everything the organization does will be center around the control framework to make sure that everything is running smoothly and everything being done will help mitigate risk.…[Read more]

Agreed Daniel, the control framework acts as a manual or guide for IT auditors to look to for comparison of controls when conducting an audit. It helps to make sure that everything is being done correctly. If there is an issue, then they can look to it to see if there are any issues and why those issues may have occurred.

Great answer Said, customization for users would be a definite benefit for customers and would make the ERP system different then the competitors. Users would be able to set it up to their needs and make it easily accessible for themselves which would be a benefit. You bought up a good point about making the system an online based instead of…[Read more]

Good point Daniel, the government definitely plays an important role in regulating compliance laws for organization to follow. The Government set polices for organizations to follow to make sure that not just that organization but all organization of that type follow the same rules and regulations. This is to make sure everything is safe for their…[Read more]